connect2bms.com

- BRISTOL-MYERS SQUIBB COMPANY -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:a3:fc:ae:74:ed:31:57:7f:f7:11:bc:ee:45:43:d6 was issued on by DigiCert Inc.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BRISTOL-MYERS SQUIBB COMPANY

Organization: BRISTOL-MYERS SQUIBB COMPANY
State / Province: New Jersey
Locality: Pennington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a3:fc:ae:74:ed:31:57:7f:f7:11:bc:ee:45:43:d6
Serial Number (int): 3509925368618415920769609383234847702
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d2:01:31:45:b7:ad:fc:15:73:a6:95:b5:73:09:30:de:d3:4d:ff:ba
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): ba:64:ef:a3:c4:60:43:f0:44:95:2a:ea:32:f0:76:d8:fd:43:9d:9c
Fingerprint (sha256): 01:17:78:03:f8:16:ae:8d:6e:22:9e:2b:e5:d9:e4:98:35:bf:2f:12:c0:3f:7a:87:a9:69:7a:d4:d7:1a:b7:97

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate connect2bms.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect2bms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect2bms.com
www.understandingHCM.ca
www.themissingucstep.com
www.onureg.ca
understandingHCM.ca
themissingucstep.com
onureg.ca
www.mmtreatmentoptions.com
hcm-angehen.at
mmtreatmentoptions.com
www.hcm-angehen.at
www.connect2bms.com
www.mmcenterfornurses.com
www.myelomacentral.com
www.bmsesign.com
www.sprycel.com
mmcenterfornurses.com
myelomacentral.com
bmsesign.com
sprycel.com
www.zeposia.com
www.mysotyktu.co.uk
www.tjekdinpuls.dk
www.podriasercmh.com
www.sotyktu.no
www.bmshcpresources.com
www.sotyktuespanol.com
buildeasy.bms.com
zeposia.com
mysotyktu.co.uk
tjekdinpuls.dk
podriasercmh.com
sotyktu.no
bmshcpresources.com
sotyktuespanol.com

Other certificates including the domain name connect2bms.com

(limited to 100 certificates)
connect2bms.com
connect2bms.com
connect2bms.com
imperva.com
imperva.com
*.bmspophealth.com
connect2bms.com
connect2bms.com
*.bmspophealth.com
imperva.com
imperva.com
imperva.com
connect2bms.com
connect2bms.com
imperva.com
connect2bms.com
imperva.com
connect2bms.com
*.bmspophealth.com
connect2bms.com
connect2bms.com
zeposia.com
connect2bms.com
connect2bms.com

Certificate

The complete raw certificate details for connect2bms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+NZ87uoHnar8pxqhTJg
VPsVpsQiV26grjM4wedhJoOerqyk7U9H6sqkUjMJhaMdPHUZJJqX1yVCMwiGZnqi
6UW9/11ttVSMJ/mQsh5WrwHId7UeytUKN+gA/0UzBSSIzAOBcTP83U/HiHuPAU9D
BXxUkJoY3Aawy1FjYPzZPTZDGrYRCb93ItaNKk2TYlp3McZFRNeCbYJryn7BN8Py
03A/A6TGwZPOZdCtDWBjZmDYHBDTYMeVU77dgY6v0+/yoVSMpkC1AbwgEykPj/xP
MunXShfJORxUVY5wVGLKYxaMR3GXjHo3tD/U+aNM1xoakky+WlTO1NL/+hb7XyK2
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3509925368618415920769609383234847702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRISTOL-MYERS SQUIBB COMPANY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect2bms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23718674170263194578799565685791905432808706332036425841205219031482655209281221105492556822877412622974108708191126182220659867619441516016279826399692772164969444367353995732974967935385435050885141486220083795038653921877494118562472435476590549104078283963940615024067204988652681354962619395855694222624745112718585020450854124730072314894588495719735878305764556408225820258561578073472001610198644886351720189617412028105497842240132811925959058180485617039503893274304978278342291308098787041423798110639168750800062091076848381126608891259806397721693467783341090250229332646177507541099092713368260117182151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2013145b7adfc1573a695b5730930ded34dffba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (687 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understandingHCM.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themissingucstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onureg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'understandingHCM.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themissingucstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onureg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmtreatmentoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcm-angehen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmtreatmentoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcm-angehen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcenterfornurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myelomacentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprycel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcenterfornurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myelomacentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprycel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tjekdinpuls.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podriasercmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmshcpresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktuespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildeasy.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjekdinpuls.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podriasercmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmshcpresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktuespanol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071e819ec691a782797f98c4da1563f13b1f25d583a9dfcb68b336df975b766fed68662c0686873ec46838fee799b69614349feb1fbd63ce9b8ec31790c32099af5a3b33ef127834b66cd7f689a1fc791892c145e23787d1a43632510058ce2fe8f324a3a68f08803dea51d56f37f12d4d4a4f3f53f9076c449a46e3d827c06b5700225aaed53bbf8de383e154ee40e051e7bfacdff0301c21e117267cc70dff755202539f3761dd2cc8764838e6083815c621b190722cfb99f44f27d388ec6fd15ab6123c2f57a29671f005eb63536a542c90e7928a6ecdb40b8f6ef502aae9a8ff8e654c09be3427fb3ad47c527593b65910613979dcdab8c1f36d1ef6f2349